Unblock-Tpm
Unblock-Tpm
Resets a TPM lockout.
構文
Parameter Set: Owner Auth
Unblock-Tpm [[-OwnerAuthorization] <String> ] [ <CommonParameters>]
Parameter Set: File
Unblock-Tpm -File <String> [ <CommonParameters>]
詳細説明
The Unblock-Tpm cmdlet resets a Trusted Platform Module (TPM) lockout. TPM locks itself to prevent tampering or attack. This is called a lockout. To end a TPM lockout, you must provide a valid owner authorization value. You can enter an owner authorization value or specify a file that contains the value. If you do not provide a value, the cmdlet attempts to use a value stored in the registry.
For more information on TPM, see the Trusted Platform Module Technology Overview in the Technet library at https://technet.microsoft.com/en-us/library/jj131725.aspx.
パラメーター
-File<String>
Specifies a file that contains the current owner authorization value for the TPM. You can use the TPM Management Console to create this file.
エイリアス |
なし |
必須? |
true |
位置は? |
named |
既定値 |
なし |
パイプライン入力を許可する |
false |
ワイルドカード文字を許可する |
false |
-OwnerAuthorization<String>
Specifies the current owner authorization value for the TPM.
エイリアス |
なし |
必須? |
false |
位置は? |
2 |
既定値 |
なし |
パイプライン入力を許可する |
true (ByValue) |
ワイルドカード文字を許可する |
false |
<CommonParameters>
このコマンドレットは次の共通パラメーターをサポートします。-Verbose、-Debug、-ErrorAction、-ErrorVariable、-OutBuffer、-OutVariable.詳細については、以下を参照してください。 about_CommonParameters (https://go.microsoft.com/fwlink/p/?LinkID=113216)。
入力
入力型は、コマンドレットにパイプできるオブジェクトの型です。
出力
出力型は、コマンドレットによって生成されるオブジェクトの型です。
TpmObject
A TpmObject object contains the following information:
-- TpmReady. Whether a TPM complies with Windows Server® 2012 standards.
-- TpmPresent. Whether there is a TMP on the current computer.
-- ManagedAuthLevel. The level at which the operating system manages the owner authorization. Possible values are Legacy, Balanced, and Full.
-- OwnerClearDisabled. Whether TPM can be reset. If this value is True, the TPM cannot be reset through the operating system by using the owner authorization value. If this value is False, the TPM can be reset through the operating system.
-- AutoProvisioning. Whether the computer can use auto-provisioning. Possible values are NotDefined, Enabled, Disabled, and DisabledForNextBoot.
-- LockedOut. Whether a TPM is locked out.
-- SelfTest. Information returned by a test that TPM runs.
注
- Be sure to understand the protection logic TPM uses. The TPM allows at least one attempt to reset the TPM lockout by using the owner authorization value. For more information, see the Reset the TPM Lockout topic in the Technet library at https://technet.microsoft.com/en-us/library/dd851452.aspx.
例
Example 1: Reset a lockout
This command resets a TPM lockout. The command specifies the owner authorization value vjnuW6rToM41os3xxEpjLdIW2gA=.
PS C:\> Unblock-Tpm -OwnerAuthorization "vjnuW6rToM41os3xxEpjLdIW2gA="